Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/su467D3YN0mL_ZN4YI2DqGbgBxw.roa
File:                     su467D3YN0mL_ZN4YI2DqGbgBxw.roa (raw, json)
Hash identifier:          OANPcnC0c1QpIOnNkNWEyiadkGkswMkVb9MjbmSXCqE=
Subject key identifier:   B2:EE:3A:EC:3D:D8:37:49:8B:FD:93:78:60:8D:83:A8:66:E0:07:1C
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0162
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/su467D3YN0mL_ZN4YI2DqGbgBxw.roa
Signing time:             Thu 31 Oct 2024 01:34:16 +0000
ROA not before:           Thu 31 Oct 2024 01:34:16 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        118.238.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:34:16 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=B2EE3AEC3DD837498BFD9378608D83A866E0071C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:ac:90:bb:09:85:43:b0:08:c5:f7:d1:b5:
                    85:29:ad:33:0c:a2:2f:65:2c:e3:69:9c:8a:ba:95:
                    dc:f8:18:1c:cb:c2:57:34:65:c0:b0:d3:89:83:1c:
                    07:d7:d4:5a:2c:3c:2b:b8:e0:44:81:47:ba:2a:82:
                    9d:23:27:e0:ac:68:69:1d:d2:99:c3:e9:88:f7:30:
                    30:66:fe:11:32:70:88:e3:00:dc:cc:9a:63:e5:50:
                    51:8e:76:80:e5:ee:dc:7c:fc:3d:d6:70:02:c5:50:
                    3e:55:69:dd:c7:17:d6:60:c1:83:27:73:9d:23:5b:
                    ba:9e:a5:11:8e:5d:26:de:aa:00:b6:fb:55:c6:19:
                    f2:47:f5:e1:7a:ff:77:8b:9a:aa:6f:f0:55:08:88:
                    92:30:63:38:95:5e:09:e2:d8:58:f6:fc:91:b9:23:
                    0a:34:d4:ef:dc:68:cf:8f:bf:0f:28:55:87:0b:ad:
                    a8:b4:3b:27:d4:3e:ae:4e:4f:f0:74:36:23:04:27:
                    e9:44:75:cc:00:c8:28:61:c2:1a:1b:5c:34:85:77:
                    7e:11:3d:9c:9a:9f:e3:d1:06:9c:f7:f0:4a:62:9f:
                    a0:76:16:46:88:1b:dc:97:f7:1c:07:53:85:70:2d:
                    a5:f5:e7:97:07:57:d7:76:75:9d:a7:99:11:cf:e0:
                    8e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EE:3A:EC:3D:D8:37:49:8B:FD:93:78:60:8D:83:A8:66:E0:07:1C
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/su467D3YN0mL_ZN4YI2DqGbgBxw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.238.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:fd:8a:9d:a8:e8:c9:71:f9:ee:d1:01:d4:77:e0:1f:84:de:
         6a:f8:f5:a1:d0:d2:33:93:f7:36:f8:34:f3:98:6d:a7:13:24:
         67:21:de:c3:0a:f3:f0:70:a6:fa:da:19:43:2a:cc:48:cc:b6:
         92:d7:5d:2c:c1:54:e7:18:1d:56:fe:4d:4f:6b:df:dc:9b:c4:
         cc:db:a6:a0:93:65:14:02:1c:9b:a3:5f:e7:d4:d7:8c:30:7c:
         6a:63:1d:6a:d2:3e:3c:66:1c:4f:03:41:cd:a3:13:91:75:28:
         7d:c7:e2:bd:87:f0:7d:f5:7f:24:59:72:87:a8:0b:82:db:ab:
         44:9c:d7:04:f4:b3:d3:ad:56:2e:06:7b:78:43:5e:52:2a:93:
         02:2f:a3:1f:75:ce:c2:de:32:43:f7:13:98:d8:ee:34:97:50:
         f6:01:95:44:84:93:7b:99:ed:bc:b9:19:63:ae:61:ef:db:78:
         43:9e:3f:7d:2e:af:7d:ad:97:24:fe:df:ab:46:61:bf:aa:37:
         72:9a:84:56:20:eb:13:7d:93:ba:61:95:2c:cd:71:50:f2:75:
         b4:fd:9f:d4:fc:c5:0e:d6:94:bc:61:19:a0:60:21:d4:d8:bb:
         51:e1:6b:44:8d:5e:7d:71:9e:0f:94:c9:f2:d3:6a:7c:25:5f:
         ca:9e:2f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:45 2025 by rpki-client